PT-2020-7607 · Microsys · Microsys Promotic

Published 2020-02-13 · Updated 2020-02-20 · CVE-2014-1617

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsys PROMOTIC version 8.2.13

Description The issue is related to an ActiveX Control Start Buffer Overflow, which can lead to denial of service.

Recommendations For Microsys PROMOTIC version 8.2.13, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2014-1617

Affected Products

Microsys Promotic

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2014-1617 · Security Note
• http://fortiguardcenter.com/encyclopedia/ips/38068 · Note
• https://packetstormsecurity.com/files/cve/CVE-2014-1617 · Note
• https://t.me/cvenotify/1025 · Telegram Post